Comptroller of Currency Issues Bulletin on Interagency Guidance on Third-Party Relationships – Risk Management

WASHINGTON, June 7 -- The U.S. Department of the Treasury's Office of the Comptroller of the Currency issued the following bulletin (No. 2023-17) on June 6, 2023:

* * *

The Office of the Comptroller of the Currency (OCC), the Board of Governors of the Federal Reserve System, and the Federal Deposit Insurance Corporation (collectively, the agencies) today issued the "Interagency Guidance on Third-Party Relationships: Risk Management."

Rescissions

This bulletin rescinds/1

* OCC Bulletin 2013-29, "Third-Party Relationships: Risk Management Guidance"

* OCC Bulletin 2020-10, "Third-Party Relationships: Frequently Asked Questions to Supplement OCC Bulletin 2013-29"

Note for Community Banks

This guidance applies to all banks with third-party relationships./2

Highlights

The final interagency guidance

* promotes consistency in the agencies' supervisory approach to third-party risk management.

* outlines the third-party risk management life cycle and identifies risk management principles applicable to each stage of the life cycle.

* clarifies that not all third-party relationships present the same level of risk or criticality to a bank's operations.

* describes sound risk management principles to consider when developing and implementing third-party risk management practices, commensurate with the bank's risk profile and complexity as well as the criticality of the activity supported by the third party.

Further Information

Please contact Tamara Culler, Director for Governance and Operational Risk Policy, Operational Risk Policy Division, at (202) 649-6550.

Grovetta N. Gardineer, Senior Deputy Comptroller for Bank Supervision Policy

Related Link

* "Interagency Guidance on Third-Party Relationships: Risk Management" (PDF) (https://www.occ.gov/news-issuances/news-releases/2023/nr-ia-2023-53a.pdf)

* * *

Footnotes:

1/ OCC Bulletin 2002-16, "Bank Use of Foreign-Based Third-Party Service Providers: Risk Management Guidance," and other OCC issuances and publications that discuss the use of third parties are not being rescinded by this bulletin and instead supplement the final interagency guidance.

2/ "Banks" refers collectively to national banks, federal savings associations, covered savings associations, and federal branches and agencies of foreign banking organizations.

* * *

Original text here: https://www.occ.gov/news-issuances/bulletins/2023/bulletin-2023-17.html